Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: +UAd71JzN4HEO43L+XWSjZtWjKbaiAyxT5Pw3sU2MEE=
Subject key identifier: EA:BB:F4:16:F1:54:ED:C9:E4:09:42:B4:85:71:22:BF:5D:7F:73:D8
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019A4F62DDB71F3CCB61BDAAAEE6DB09E296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0DF2
Signing time: Tue 04 Nov 2025 15:01:10 +0000
Manifest this update: Tue 04 Nov 2025 15:01:10 +0000
Manifest next update: Wed 05 Nov 2025 15:01:10 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: AFL4z/lycpblozWOtiTbOvvTgkT6R4aI/YDuYQgkgW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:dd:b7:1f:3c:cb:61:bd:aa:ae:e6:db:09:e2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Nov 4 15:01:10 2025 GMT
Not After : Nov 5 15:01:10 2025 GMT
Subject: CN=eabbf416f154edc9e40942b4857122bf5d7f73d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:48:46:eb:e2:d9:3d:07:ad:0c:de:f4:fd:
c2:89:e6:35:e5:d0:d4:aa:d3:81:f2:2d:57:49:22:
44:2d:93:c2:09:d2:cd:7f:bb:ab:1f:fa:2f:6f:7e:
2b:a0:2c:7f:5b:2f:89:27:f6:84:21:08:8d:1a:30:
b8:a2:7c:e5:37:7d:49:2c:c9:c9:ad:05:45:1b:95:
8a:e8:2d:d8:65:3b:79:7f:f2:2f:79:14:fe:b2:d0:
12:c7:f5:34:96:6b:5d:b5:43:08:d3:40:ba:85:c7:
ae:97:6d:31:d4:7c:22:5c:87:7e:70:6d:04:0e:ba:
6c:ad:bc:09:d8:66:e1:94:dd:ab:30:44:dc:08:ae:
d8:84:97:fe:c4:3b:67:57:cf:07:f2:91:d7:22:72:
32:ea:3f:f8:7b:4b:d9:04:88:18:1d:4a:86:13:58:
fa:1d:ee:aa:e2:57:45:c3:23:fa:f3:dc:78:65:a1:
ce:12:6f:43:86:37:b3:14:d2:3d:79:5c:41:ff:59:
8b:20:cb:a8:85:94:79:eb:1c:1d:24:48:13:67:84:
80:eb:eb:b5:f0:af:bb:8c:2c:c5:a9:a2:c2:fe:2f:
90:6f:86:c7:32:5c:e9:68:b6:bb:1d:88:7a:ff:06:
b0:3d:20:d5:fb:21:91:4d:dc:13:ef:9a:48:c1:f4:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:F4:16:F1:54:ED:C9:E4:09:42:B4:85:71:22:BF:5D:7F:73:D8
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:47:92:d6:9e:75:e1:4b:c7:53:44:d2:fb:c1:15:17:a3:d4:
a8:a8:74:08:97:86:53:b9:d8:c9:15:c3:7c:b8:ab:d5:c7:2a:
0a:2c:15:e5:da:71:d7:83:2d:e1:22:be:78:3e:4a:04:3b:ec:
0b:56:36:a8:40:46:7a:bc:09:91:2f:38:60:b8:0b:e2:0a:e9:
cd:27:26:a1:68:fa:f4:1b:55:2a:0b:9c:b3:b8:9b:b1:cb:05:
8f:e6:7e:2a:e8:7d:5b:4c:5c:1a:75:45:3d:3f:c2:96:71:e0:
9a:cf:cd:dd:9d:ef:89:7e:9b:49:d6:63:a5:5e:e9:cd:21:92:
a1:0a:01:30:60:7a:b4:81:04:a1:1f:48:f3:0d:2b:27:f7:c1:
b9:48:b9:ce:b9:8b:a9:15:92:8e:fa:0a:77:3e:30:38:74:73:
1d:62:ee:ea:4a:fe:3a:6c:ee:90:3e:52:86:5e:3d:a1:b3:d4:
1f:bf:19:4d:f3:86:44:bf:d4:c7:e5:90:ca:61:e3:07:17:ab:
e7:0b:a7:33:3f:d6:85:08:2c:04:fe:73:ca:5e:45:fe:a3:61:
63:8b:a2:5f:7f:6f:32:4f:15:3a:00:1f:74:07:10:94:b5:17:
d7:4c:4a:34:5e:75:aa:68:7c:59:f3:28:ab:31:f9:1d:a5:15:
93:3c:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:26 2025 by rpki-client